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Introduction 

In conjunction with a recent NASA Engineering and Safety Center (NESC) investigation of flight 
worthiness of Kevlar Overwrapped Composite Pressure Vessels (COPVs) on board the Orbiter, two stress 
rupture life prediction models were proposed independently by Phoenix and by Glaser. In this paper, the 
use of these models to determine the system reliability of 24 COPVs currently in service on board the 
Orbiter is discussed. The models are briefly described, compared to each other, and model parameters and 
parameter uncertainties are also reviewed to understand confidence in reliability estimation as well as the 
sensitivities of these parameters in influencing overall predicted reliability levels. 

Differences and similarities in the various models will be compared via stress rupture reliability 
curves (stress ratio vs. lifetime plots). Also outlined will be the differences in the underlying model 
premises, and predictive outcomes. Sources of error and sensitivities in the models will be examined and 
discussed based on sensitivity analysis and confidence interval determination. Confidence interval results 
and their implications will be discussed for the models by Phoenix and Glaser. 

Symbols 

Oburst Stress in fiber at burst pressure 

c op Stress in fiber at operating pressure 

c op ], c op 2 Stress in fiber at past/present operating pressures 

c re f Stress at reference time in the plateau region 

p Power law coefficient for stress in Phoenix model 

P Shape parameter 

Pi, p 2 , p 3 Coefficients based on maximum likelihood estimates in Glaser Model 

t Time 

t\ Past effective time in hours 

t C j- e f Reference time at the plateau region 

a Scale parameter 
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P Probability 

At Current mission time spent at operating stress ratio 

s Stress ratio used in the Glaser model 

r Correction factor to account for pressurization rate differences 

g(X) Limit state function 

X Vector of uncertain variables 

f- Joint probability density function 

H Region of uncertain variables 


Stress Rupture as an Aging Orbiter Concern 

Composite Overwrapped Pressure Vessels (COPVs) consist of a thin metallic liner overwrapped with 
a high strength filament wound composite. Because the composite carries the majority of the pressure 
load during operation, the amount of higher weight metallic structure needed is reduced. This results in a 
significantly lower mass pressure vessel as compared to an all-metallic vessel. The overall savings 
achieved based on the required 24 COPVs per Orbiter, was 700 lb over monolithic titanium tanks (ref. 1). 
On the Orbiter; these vessels are used for storing pressurant inert gases for propulsion systems (Orbital 
Maneuvering System (OMS), Reaction Control System (RCS), and Main Propulsion System (MPS)) and 
environmental systems (Environmental Control System (ECLSS)). Locations of these COPVs on board 
the Orbiter are shown in figure 1 . 

COPVs are susceptible to many of the same failure modes as metallic pressure vessels, but additional 
considerations are required to ensure that the vessel has a reliable composite overwrap. The majority 
of these composite failure modes were adequately mitigated during the design of the vessels, but a 
re-assessment of the stress rupture failure mode was necessary for the Orbiter COPVs because most of the 
COPVs had been in service since the beginning of the Shuttle program in the early 1980s (ref. 1). This 
re-assessment was important because a COPV that fails due to the stress rupture failure mode will burst 
suddenly. A burst failure of any of the COPVs on board the Orbiter will have catastrophic consequences 
leading to crew and vehicle loss. 

Stress rupture is a failure mode of a structure under sustained load and time. A COPV that fails due to 
the stress rupture failure mode will burst. It is understood mainly on a phenomenological level and stress 
rupture life prediction methodologies are based on stochastic modeling. The following have been 
repeatedly observed by many researchers (refs. 2 to 7). 
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(1) Stress rupture lifetime is mainly a function of composite fiber stress (usually expressed as a 
percentage of short-term strength, called the stress ratio). 

(2) Stress rupture is a material property of the fiber although matrix properties play a role in terms of 
influencing the mechanics of inter-fiber load sharing prior to catastrophic failure. Different fiber types 
(carbon, Kevlar, glass) have different stress rupture characteristics. 

(3) Stress rupture life data can be fit using Weibull statistics with a distribution function of the form: 


P(X<x)=\-e ya 


(1) 


where x is stress, a is the scale parameter and p is the shape parameter. 

(4) During room temperature testing, slow degradation of the fiber with time is not observed, i.e., the 
fiber appears to maintain its original strength until it suddenly fails, and thus, strength (burst) testing of 
aged composites cannot provide an indication of remaining stress rupture life (for tests at elevated 
temperatures, however, a reduction in burst strength has been observed for Kevlar). 

Stress rupture of a composite is due to the failure of the fiber. At present, no single mechanism has 
been proven definitively as the leading cause for failure in Kevlar or carbon, although for glass, a water- 
based stress-corrosion mechanism has been demonstrated (ref. 8). For Kevlar, chain scission/slippage 
models and time-dependent continuum crack growth models have been suggested, but the parameters in 
the end must be established empirically (refs. 9 and 10). Ties between fiber stress rupture failure and the 
overall failure of the composite have been analytically studied. A progressive failure model has been 
developed by Phoenix, and others at Cornell, based on a progression beginning with chain 
scission/slippage within the fiber prior to the failure of adjacent fibers and shear failure of the resin 
leading to fiber break cluster growth and failure of the composite (ref. 9). Since load transfer to other 
fibers occurs through shear transfer in the resin during the failure of a composite, the resin does have an 
effect on the stress rupture life, but the effect is not first order for Kevlar fiber at typical operating stress 
levels. Matrix effects are more significant in the case of carbon fibers (ref. 11). 

Stress rupture life testing for Kevlar has been performed primarily by Lawrence Livermore National 
Laboratory (LLNL) and Cornell University with Kevlar material characterization contributions from the 
Y12 Plant at Oak Ridge National Laboratory and Sandia National Laboratories. These tests have 
consisted of single-fiber, fiber-bundle, resin impregnated strand (or tow tests), and COPV testing at a 
single constant stress level (refs. 12 to 15). Although most of this testing has been conducted at ambient 
temperature, temperature acceleration has been performed to decrease the stress rupture life based on the 
concept that scission rate increases with temperature. Testing of this idea was performed at LLNL and 
Cornell (ref. 16). 

Although models based on data from LLNL, Cornell, and DOE are available in the literature, they are 
not directly comparable to any other COPV design as published. For the purposes of evaluation of the 
Orbiter COPVs, the pressure vessel data developed at LLNL were used because this data most closely 
resembles the structure of the Orbiter COPVs. However, modifications to the data as published were 
required. Changes were made to account for the load carrying effects of the liner, the effects of strength 
variations between different spools used to overwrap the COPVs, and compensation for differences in 
ultimate burst strength of the composite due to differences in pressurization rate between the Orbiter 
COPVs and LLNL test COPVs. In addition to these a small correction to account for Kevlar creep 
relaxation was also applied. 

The establishment of a relationship between the very-different designs of the LLNL test COPVs and 
the Orbiter vessels was non-trivial and was a major thrust of the study. The development of relationships 
between burst strength, composite operational stress level, and fiber quantity were necessary. Detailed 
discussion of these relationships will be reported elsewhere. 
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To determine the continued flightworthiness of Orbiter COPVs, the NESC sponsored a study of 
forecasts based on independently derived models for stress rupture. Since Leigh Phoenix at Cornell 
University, Ron Glaser at Lawrence Livermore National Laboratory (LLNL), and Ernest Robinson at the 
Aerospace Corporation had already established independent frameworks for the modeling of stress 
rupture of Kevlar as evidenced in academic literature over the past 30 years or so, they were chosen to 
provide stress rupture life models to the NESC for the Orbiter COPVs. The Phoenix and Glaser models 
will be discussed and compared in this paper although the model of Robinson has equal merit and will be 
discussed in detail in a future publication. 


Phoenix Model 

The Phoenix model has been developed over the past 27 years and is well documented in the 
literature. It is based on a Weibull distribution framework for strength and lifetime with the embodiment 
of a power law to describe damage in a composite versus stress level. Derivation of the model is available 
in references 9 and 1 7, where the power-law in stress level (with temperature dependence) is derived from 
thermally activated chain scission using a Morse potential as a model. While the basic concepts for the 
model are the same as those previously developed, the parameters are based on an entirely new analysis 
of the LLNL pressure vessel data. Though not discussed here, the model has also been applied to strand 
data as well, with comparable results. In the simplest setting of constant stress applied quickly and 
maintained over a long time period, the basic equation for failure probability is given by 


P(t,o) = 1 - exp 


f . \ 


(_ t c,ref 


f y 

7 op 


yV G, ' e / . 


( 2 ) 


The quantity ( o 0 ,JOburst ) is the ratio of fiber stress at operating pressure to fiber stress at burst pressure 
(stress ratio), t is time, C, re /is a reference time, p is the power law exponent, and p is the Weibull shape 
parameter for lifetime. The value for a burst accounts for pressurization rate differences between Orbiter 
COPVs and the LLNL test COPVs. This strain rate effect has been discussed in reference 4 and will be 
discussed in later publications in more detail. The strain rate difference between Orbiter COPVs and 
LLNL test COPVs is inherent in the Phoenix model because the stress ratios for the LLNL vessel data 
have been modified to account for this rate. The model is shown for a single stress level over time, but for 
more general time histories a memory integral is used to accumulate damage (similar to Miner’s rule for 
fatigue) at different stress levels. Also, at very high stress levels a second quantity within square brackets 
and of similar structure to the first must also be included with a leading minus sign as well (i.e., in a 
weakest damage mechanism framework). This second quantity has different parameter values, especially 
a much higher p value. 

In the Phoenix model, values for the parameters t Cfe f, p, and p are determined based on the LLNL 
vessel data and are influenced by observations of stress rupture behavior of strands and single fibers. 
Values for these parameters determined by Phoenix for the LLNL vessel data are shown in table I. The 
power law exponent, p, is the inverse of the slope of the logs of the scale parameter of the stress rupture 
data and the stress ratio. The parameter C, re /is an anchor point determined from this slope and an 
instantaneous reference strength. In the Phoenix model, both p and p are based primarily on the LLNL 
vessel data but were chosen such that all data available (which includes data from other Kevlar COPVs 
and strands) are considered. In this way the parameters are determined from broader observations of stress 
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TABLE I.— PARAMETER VALUES 
FOR THE PHOENIX MODEL 


Parameter 

Value 

P 

24 

P 

1.2 

^c.ref 

0.5456 


Stress Rupture Curve-Phoenix Model 
Estimated Lifetime Quantiles 



0.99 

0.999 

0.9999 

0.99999 

0.999999 


Figure 2. — Phoenix stress rupture curve. Quantiles are for probability of survival. 


rupture data as a whole, making the resulting reliability estimations consistent with all stress rupture data. 
This big picture approach is a unique feature of the Phoenix model. 

Based on the Phoenix model, a series of reliability quantile curves can be developed for use in design 
that allow estimation of the lifetime for a chosen quantile. Figure 2 shows the stress rupture life curves for 
the Phoenix model. This approach can be used by choosing an appropriate combination of stress ratio and 
lifetime to ensure a desired reliability during the design of a COPV. Analysis based on this approach is 
employed currently by COPV manufacturers. 

Flowever, in the case of the Orbiter, the COPVs have been operating successfully for a long period of 
time, so a conditional probability approach was used (in essence ruling out unusually short lived vessels 
within the population since none actually occurred). In this approach, a reference time is chosen and all 
successful history prior to the reference is considered in the analysis. In the case of the Orbiter vessels, the 
reference time was chosen as retum-to-flight. Because the vessels have successfully survived up to the 
reference time this successful past history is credited in the analysis. The conditional failure probability 
equation for the Phoenix model follows. 
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P(t a(-),q) = l-exp 


(3) 


y *c,ref 


* op 1 


j V ° re f 


+ - 


At 


*c>ref 


* op2 
\ a ref 


P 

> + < 


^c,ref 


a o/?l 

K a ref 


In this equation, two new terms appear, one for a second stress level and another to account for past 
history. The second stress level is introduced to account for any procedural or operational changes to be 
made for the future missions in order to improve reliability estimates. This equation was used in all 
Phoenix calculations for Orbiter reliability estimates for future flights. 

Glaser Model 

The Glaser model was developed independently of the Phoenix model during the same time frame 
and is also based on a Weibull distribution with a generalized power law. The equation for the survival 
probability in the Glaser model is below. 


p i T s >4 = ex P 


r , 




(4) 


a (s) = loga(s) = + P 2 l°g 5 

a(s) = l/ 6 (s) = p 3 

where a, a are the model parameters and defined in terms of the stress ratio s and the arbitrary constants 
Pi, P 2 , and p 3 . 

The model simplifies to: 


P\T S >t] = exp 


f f V'P3 


Ve Pl 5 P2 j 


(5) 


In the Glaser model, 5 is the stress ratio, and the p’s are coefficients based on the LLNL vessel data. 
An important feature of the Glaser model is that the stress ratio is considered an u nk nown parameter that 
is estimated by a synthesis of the LLNL lifetime and burst data for vessels of varying strengths due to 
spool fabrication differences. Unlike the Phoenix model, no strain rate adjustments were applied to the 
LLNL vessel burst strengths to account for strain rate differences relative to the LLNL vessels. 

In the model, the p values (along with spool strength related nuisance parameters) are determined 
based on a maximum likelihood methodology developed by Glaser and are shown for the LLNL COPV 
data in table II. 


TABLE II.— COEFFICIENT VALUES 
FOR THE GLASER MODEL 


Parameter 

Value 

3, 

109.4367 

IT 

-23.602 


0.8088 
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While the form of the Glaser model is similar to that presented in the literature and in LLNL reports 
(refs. 2 and 14), estimation of o.(.v) and o(.v) was changed to allow a comparison with the Orbiter COPVs. 
The original forms had a stress varying shape parameter, b(s), which was a polynomial function of stress 
ratio, rather than a constant. The model was changed to a constant shape parameter as a result of 
incorporating strength effects in the stress ratio parameter. 

As discussed previously, the model can be represented graphically in a set of stress rupture curves. 
Glaser was the originator of this representational method and curves based on his model are shown in 
figure 3. While these curves are applicable to the Orbiter COPVs, curves based on previous versions of 
the Glaser model are not directly applicable to the Orbiter COPVs. 

Although these stress rupture curves provide an expedient method of determining reliability during 
design, Glaser also chose a conditional reliability approach for the Orbiter COPVs. The conditional 
reliability version of the Glaser model is below. 


M(s,t,s*, A) = 1 - P{T S * > t * + A | T s * > t *} = 1 - 


exp 


1 

1 

( t*+A 

1/P3 

+ 

' t* 'j 

XD 

1 


le Pl s* p2 J 

U Pl s* Pz J 

1 


( 6 ) 


where a mission of length A at stress ratio 5* is planned after a successful past history of time t at stress 


ratio s ; t* = t 


b s * 


is the effective age had the vessel heretofore been subjected to ratio s* rather than ,v. 


V S 

In this formula, another term is created to account for the successful past history of the Orbiter COPVs. 
This conditional reliability equation was used in all Glaser calculations for Orbiter reliability estimates for 
future flights. 


Stress Rupture Curve- Glaser Model 
Estimated Lifetime Quantiles 



)P(0.5 
)P(0.1 

)p(0.01 

)p(0.001 
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Figure 3. — Glaser stress rupture curve. Quantiles are for probability of survival. 
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Comparison of Reliability Models from Glaser and Phoenix 

Both the Phoenix and Glaser models are based on a power-law framework within the Weibull 
distribution. This methodology has a basis in early composites failure theory developed by Coleman 
(ref. 18). The models provide virtually indistinguishable reliability estimates for the Orbiter COPVs, 
especially when conditional reliability is used. A comparison between results for each model is shown in 
table III. 

TABLE III.— COMPARISON OF RELIABILITY ESTIMATES FOR USING PHOENIX AND GLASER MODELS 


[Estimates are calculated for the next scheduled flight.] 



Stress Ratio 
for Phoenix 

mEBIIi 


Hours for 
One 

No. of Ves 

Non-Conditional 

Conditional 

Phoenix 

Glaser 

Phoenix 

Glaser 

OMS 

0.575 

0.604 

4151 

252 

1 

0.994571 

0.995182 

0.99960116 

0.99963484 

OMS 

0.575 

0.604 

3983 

252 

1 

0.994833 

0.995422 

0.99960434 

0.99963828 

RCS 

0.515 

0.541 

7551 

630 

2 

0.999066 

0.999187 

0.99990573 

0.999915242 

RCS 

0.515 

0.541 

6620 

395 

2 

0.999203 

0.999309 

0.99994256 

0.999948621 

RCS 

0.515 

0.541 

6112 

249 

2 

0.999276 

0.999374 

0.99996443 

0.99996828 

MPS he 

0.54 

0.576 

858 

24 

3 

0.999597 

0.999484 

0.99998642 

0.99998206 

MPS He 

0.47 

0.494 

858 

24 

7 

0.999983 

0.999986 

0.99999942 

0.99999951 

ECLSS N2-1 

0.445 

0.468 

74495 

648 

1 

0.999892 

0.9999 

0.99999887 

0.99999892 

ECLSS N2-2 

0.445 

0.468 

74495 

648 

1 

0.999892 

0.9999 

0.99999887 

0.99999892 

ECLSS N2-3 

0.445 

0.468 

74408 

648 

1 

0.999892 

0.9999 

0.99999887 

0.99999892 

ECLSS N2-4 

0.445 

0.468 

65910 

648 

1 

0.999906 

0.999914 

0.99999889 

0.99999895 

ECLSS N2-5 

0.445 

0.468 

61793 

648 

1 

0.999913 

0.99992 

0.99999891 

0.99999897 

ECLSS N2-6 

0.445 

0.468 

22548 

648 

1 

0.999974 

0.999977 

0.99999911 

0.99999918 


[Reliability for Entire System o 1 0.9860661 0.987511| 0.99899791 1 0.999080978| 


Table 111 shows the probability of survival estimates using the basic models (non-conditional) and 
conditional reliability models. For each of the vessel types, the reliability is determined as a function of 
the number of vessels in that type, so it’s the single vessel reliability to the number of vessels of that type. 
To determine the overall system level reliability, the reliabilities of each vessel type are multiplied to 
arrive at a reliability estimate for the Orbiter system of COPVs. This similarity of the results despite their 
independent development lends credibility to both models. 

A more general comparison of the basic models is observed in stress rupture curve comparisons. 
Figure 4 shows a stress rupture curve for the 0.999 and 0.99999 quantile. To calculate values for the 
curves, equations (2) and (5) were arranged to calculate stress ratios for these quantiles. To establish a fair 
comparison and eliminate confusion, stress ratios for the Glaser model were modified by 5 percent to 
compensate for differing methods of accounting for pressurization rate. The rate difference is built into 
the Phoenix model, whereas the pressurization rate must be applied to the Orbiter vessels before using the 
Glaser model. When these differing pressurization rate assumptions are accounted for, the differences in 
reliability estimates are very small; less than 1 percent. 

To understand why the models provide results that are so similar requires an understanding of 
differences and similarities of the parameters used. Clearly equations (2) and (4) are similar and the 
simplification of equation (4) to equation (5) reveals the power-law structure of the Glaser model. To 
facilitate a comparison, the Glaser model is mapped onto the Phoenix model. 

Rearranging the Glaser model (equation (5)), we arrive at equation (7). 


P{T S > f } = exp 


J 


( 7 ) 
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Stress Rupture Curve Comparison for 0.999 and 0.99999 



Lifetime (hr) 


Figure 4. — Stress rupture curve comparison for probabilities of survival of 0.999 and 0.99999. 


Immediate parallels can be drawn between this form and equation (2): l/p 3 must be equal to p and -p 2 
must be equal to p. A comparison of tables I and II reveal that this is true as summarized in table IV. 
However, parallels between the Glaser model and the Phoenix parameter of t c ^ are more difficult. 
Accounting for differences between the definition of stress ratio by adding a factor, r, and determining the 

value of e^ 1 allows this comparison as illustrated in equation (8). 


P{T S = exp 




1/ 


( t 5 

t „-P,. 

/P3 


yeM 2 J 



( 8 ) 


In equation (8), r = 


100 

0.95 


. This factor is needed because the Phoenix model accounts for a 5 percent 


pressurization rate effect in the LLNL data and the Glaser model defines stress ratio in terms of 
percentage of actual burst strength of LLNL vessels, as discussed previously. Calculating a value for 

e^ ] ■ r from coefficients listed in table II, a value very similar to t cje f is found as seen in table IV. 


TABLE IV.— PARAMETER AND 
COEFFICIENT COMPARISONS 


Shape 

P 

1.2 

Parameter 

l/Pa 

1.236 

Power law 

P 

24 

Exponent 

-Pz 

23.602 

Time 

reference 

^c,ref 

0.5456 

e Pl ■ r 

0.6275 
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The similarity of these models as evidenced by the similarities between parameter values is surprising 
since the models were derived using different approaches and the Glaser model had more adjustable 
parameters that might have provided a better and different fit to the LLNL data and thus, different 
predictions. These similarities in the behavior of the models lend credibility to both and to the reliability 
estimations for the Orbiter COPVs. Other models for stress rupture exist and will be explored in future 
publications. 

Confidence Intervals and Stress Rupture Parameter Sensitivities 

The conditional probability of survival is a function of several variables and parameters which have 
been determined based on limited amounts of data. However, uncertainties do exist, and treating various 
parameters as deterministic variables and arriving at a single point probability of survival estimate 
number is hidden with dangers. In order to be able to account for the inherent uncertainties, one should 
consider the probabilistic aspects of the phenomenon in a more rigorous manner. Accordingly the point 
probability estimate becomes a random variable and hence one needs to bound this with either upper and 
lower confidence bounds or one sided confidence bounds. An attempt is made to capture these in the 
Phoenix and Glaser models and a comparison of the various methodologies is presented in this section. 

Equation (9) is an expression for probability of survival in a generic form as a function of several 
pertinent random variables 


P s (a, 0 = F(o r , t r , A t r , p, P) 


(9) 


where 


°r 


gl 

®c,ref 



t c,ref 


A t r 


At, 

^ c,ref 


The symbols p and p are the power law coefficient and the shape factor, respectively. 
A limit state function (sometimes referred to as performance function) is defined as: 


( 10 ) 


( 11 ) 


( 12 ) 


g(X) = P s (X)-P so (13) 

where P so is a particular value of P s . The vector X represents the various uncertain variables considered 
in the current problem. The limit state function can be an implicit or explicit function of random variables 
and is divided in such a way that g(X) - 0 is a boundary between the region [g < 0], which means that a 
certain level of reliability is not met and [g > 0], which means the reliability is met or exceeded. It should 
be noted that since the cumulative distribution function (CDF) of P s at Pso equals the probability that 
[g < 0], the CDF can be computed by varying ^SO and computing the point probability. 
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The probability that [g < 0], is given by the integral 


P[g < 0] = J...J f x (X l ,X 2 ,....X n )dX l dX 2 ..dX n (14) 

Q 


in which/AV, X 2 , ..., X„) is the joint probability density function for variables X t , X 2 ... X„ and the 
integration is performed over the region, O, where g < 0. If the random variables are statistically 
independent, then the joint probability density function can be replaced by individual density functions. 
This integral can be computed by standard Monte Carlo procedure which is rather straightforward. 
However, depending upon the number of random variables involved and the level of Pso sought, this must 
be repeated thousands of times, to accurately build the response variable’s probabilistic characteristics. 
Although inherently simple, the large number of output sets that must be generated to build the CDF of 
the output variable, becomes its obvious disadvantage. Furthermore, if the deterministic computation of 
the response is complicated, time-consuming analysis (e.g., a large non-linear finite element analysis), the 
time required and the computational costs could become prohibitive. 

In our present case, however, we have a closed form expression for the conditional probability for 
mission survival as given below (refs. 19 to 21) 
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Equation (15) is an un-simplified version of equation (3) and is solved using 1,000,000 Monte-Carlo 
simulations for each class of vehicle. These simulations were performed using the Southwest Research 
Institute developed code NESSUS version 8.2. Details of the theory are outlined in reference 22. The 
variables considered in the process are listed in table V. The survival probabilities for one sided 
95 percent confidence limit are computed for each of the vessels and the results are tabulated in table VI. 

It should be noted that in the above calculations the four random variables are considered to be 
independent and therefore the resulting confidence limits will be pessimistically wider than the reality. 
One obvious dependency, for instance, is that since corresponds to a stress ratio of unity, whereas the 
stress ratio of interest is 0.575, and the data LLNL data itself spans the stress ratio 0.75 approximately, 
then an estimate on the low side for p will tend to be accompanied by a high estimate for t Cyre f, due to the 
pivot effect around 0.75 stress ratio and this will tend to compensate most of the effect of a low p value. 
The limits therefore can be considered to be on the conservative side. The correlation between the four 
variables must be taken in to account if more representative confidence limits are to be sought. 


TABLE V.— INPUT RANDOM VARIABLES AND THEIR VALUES 
CHOSEN FOR THE CURRENT ILLUSTRATION 


Random variable 

Distribution type 

Mean 

Coefficient of variation, 
percent 

&MOP/ 

Weibull 

0.575 

3 

P 

Log normal 

24 

5 

P 

Log nonnal 

1.2 

16 

Jr 

Log normal 

0.5457 

5 
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TABLE VI.— SURVIVAL PROBABILITIES BASED 
ON 1,000,000 MONTE CARLO SIMULATIONS 


Vehicle class 

Probability of survival, 
95 percent C.L 

Probability of failure 
95 percent C.L. 

OMS-Hc 

0.99895211 

0.00104789 

RCS-Hc 

.9998385 

.0001615 

MPS-B-He 

.99994075 

5.925E-05 

MPS-S-He 

.99999726 

2.74E-06 

ECLSS-N2 

.9999805 

1.95E-05 



Figure 5. — Sensitivity of the conditional probability of survival to 
various normalized stress rupture life estimation parameters. 


Furthermore, the coefficients of variation in the random variables considered are based on current 
best judgment. A reduction in the variance will give tighter confidence bounds. 

A limited study of the deterministic sensitivity of the conditional probability of survival to various 
parameters of interest was also done and is reported in figure 5. Each variable is normalized with respect 
to the mean value and is varied one at a time between 0.4 to 1.4. From figure 6, it is clear that the 
conditional survival probability is most sensitive to variables stress ratio and the power law coefficient p, 
while it is fairly insensitive to the values of t Cfe f, and p. 

The results of confidence bounds estimations using various formulations is given along with the point 
probability of survival estimates in table VIE Figure 6 shows a pictorial comparison of the probability of 
failure for each sub-system. In arriving at these results, the past effective times at pressure in hours for 
each COPV sub-system, as well as the current mission duration hours were best estimates at the time 
these results were computed. The past times for each of the 24 vessels were independently estimated and 
the highest number of hours for each COPV sub-system was considered in the calculations to be on 
conservative side. Since this study was done, based upon the NESC input, several operational as well as 
other changes were brought in order to minimize the times spent with the view to maximize the reliability 
and life. As a result the most recent estimations for the hours differ slightly from those reported here. For 
the purpose of comparison of various models, however, these differences do not affect the qualitative 
conclusions of the study. Note that although the methodologies used for conditional probability are 
different in the Glaser and the Phoenix models, the predictions for point probability estimates as well as 
confidence limit estimates are virtually indistinguishable. 
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0.000012471 


0.000005937 


0.000000067 


0.000001078 


□ Phoenix-95% 


0.00000274 


□ Glaser-95% 


0.001272942 


0.000130827 


0.000063516 


0.000001133 


0.000013456 


COPV Sub-system 

Figure 6. — A comparison of all the three methodologies; point and 95 percent one- 
sided confidence estimates for probability of failure for various COPV sub-systems. 


TABLE VII — A COMPARISON OF THE TWO METHODOLOGY PREDICTIONS 


OV-103 COPV 
Sub-system 

Conditional 
probability of 
survival, 
Phoenix 

Conditional 
probability of 
survival, 
Glaser 

Phoenix, 
95 percent 

Glaser, 
95 percent 

OMS-He 

0.99984546 

0.99985216 

0.99895211 

0.99872706 

RCS-He 

.99998602 

.99998753 

.9998385 

.99986917 

MPS-Hc 

.9999955 

.99999406 

.99994075 

.99993648 

MPS-Hc 

.99999992 

.99999993 

.99999726 

.99999887 

ECLSS-N2 

.99999887 

.99999892 

.9999805 

.99998654 


In addition to the present work, extensive discussion and analysis of confidence intervals has been 
undertaken by the NESC COPV team including Ron Glaser and Leigh Phoenix. It is unclear how 
confidence intervals can provide additional assurances of the future flightworthiness of the Orbiter 
COPVs. Discussion of findings and analyses of confidence interval approaches will be provided in future 
publications, but the results from the confidence interval determination developed by Glaser are shown in 
figure 6 for comparison with the present analysis. 

Conclusion 

To provide an assessment to justify continued use of the 24 composite overwrapped pressure vessels 
on board the Orbiter, stress rupture reliability estimates were provided by Phoenix and Glaser. These 
estimates are very similar despite differing approaches and this lends credibility to both models which 
were developed independently. Work is ongoing to understand uncertainty and the role of confidence 
intervals for future flights of the Orbiter. While work to revise current reliability point estimates is also 
ongoing, estimates available currently are low based on the Phoenix and Glaser models (usually a 
95 percent confidence reliability estimate of 0.999 to the end of the program is desired). Rationale for 
continued flight will be contingent upon further revision and mitigating actions. 
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